Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json)
Hash identifier: Os5/+VUtc8wOLtf3B826+aA+tPA4ivJ86akQ95LJzTg=
Subject key identifier: A0:39:B5:56:44:FB:E1:EB:A4:3A:C2:13:30:03:26:3C:9D:AC:ED:99
Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Certificate serial: 0197B77CBC48D15B353F611AF03FC321AA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
Manifest number: 0955
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: rhbFGwzmq/mD8tE3XktuS6pPrdWyY0T7ZXhvkpgNTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bc:48:d1:5b:35:3f:61:1a:f0:3f:c3:21:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=a039b55644fbe1eba43ac2133003263c9daced99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:13:05:f0:1d:d7:77:bb:96:46:18:da:31:
e2:36:25:bd:32:c0:b2:24:96:4a:e2:5c:ff:f4:d6:
98:53:e8:07:c7:46:b1:3d:00:b7:f6:2d:8b:c3:6b:
27:94:1f:24:f0:5b:31:11:ac:10:60:ad:be:b5:20:
d0:a1:26:4c:84:5a:f0:fb:f9:e1:e8:59:c1:28:b7:
ae:b2:79:6d:8e:f2:cd:1b:f3:5e:86:27:9d:5d:1d:
78:24:4d:38:bf:36:57:b6:62:9e:23:9a:aa:e7:6c:
a9:4c:ce:a0:39:d4:69:2c:c1:cb:c1:b4:87:a4:3c:
80:3e:47:73:be:07:75:a5:c5:26:74:5a:c0:86:9a:
da:90:8b:ce:f9:77:89:72:03:74:84:a8:96:44:10:
dc:2e:40:18:cc:14:18:65:33:23:bf:6b:e9:e4:3c:
5a:5a:67:69:65:e8:af:f3:64:b3:8c:b4:42:92:b6:
b2:06:43:93:5f:a2:da:3c:14:10:70:cb:f8:8f:b8:
44:49:c1:e8:c8:27:64:87:3d:fc:18:76:be:66:33:
60:aa:a5:a6:17:ea:9a:e8:c3:de:92:7b:89:50:25:
80:ef:08:53:6d:b4:ab:4b:b0:96:9e:d3:2d:6d:61:
88:c7:65:88:f4:d1:e7:87:9a:bf:af:80:9a:d7:08:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:B5:56:44:FB:E1:EB:A4:3A:C2:13:30:03:26:3C:9D:AC:ED:99
X509v3 Authority Key Identifier:
keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3a:92:f6:d3:1a:4b:7e:07:ec:b2:95:94:12:4d:be:24:3a:
76:3b:e3:ee:bd:c4:98:c6:c7:d9:77:4f:a8:09:09:0b:0d:e6:
ce:3d:75:9e:45:00:91:35:a6:f6:40:8a:e5:93:6d:98:ea:07:
f2:53:e2:b6:51:8d:6b:71:54:36:9e:71:d7:38:ce:65:8b:35:
37:3d:d9:a4:26:14:22:ad:64:32:54:50:3c:b2:f1:60:09:a6:
c6:79:5b:71:97:ae:37:86:2c:09:6d:32:d5:af:de:66:d2:a9:
ff:7b:34:0a:c5:b9:0b:48:02:be:30:6b:f3:3f:fb:10:81:b2:
37:b9:20:1e:7d:94:e9:6d:6d:3c:c0:00:e7:c9:ba:3b:c8:3e:
d1:46:a5:7c:cc:0b:ab:20:c3:9c:cc:0d:20:34:81:cb:a3:40:
35:b1:3e:cb:e5:a5:38:33:86:1e:bc:f6:2d:b6:87:d6:03:34:
a9:cd:96:83:8e:5d:50:28:df:2d:2f:e2:ec:da:58:b0:2b:13:
8d:fa:19:69:55:b7:e7:dd:75:97:79:e5:41:9f:1d:a6:eb:98:
ab:06:95:07:fd:27:3f:97:36:db:ef:c9:eb:8c:be:92:60:cd:
65:9d:be:cc:8b:c7:f0:55:d0:f8:2a:0c:f6:90:a0:f8:42:73:
63:31:e3:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fLxI0Vs1P2Ea8D/DIapNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy
MGRjMTUwHhcNMjUwNjI4MTcwMTM0WhcNMjUwNjI5MTcwMTM0WjAzMTEwLwYDVQQD
EyhhMDM5YjU1NjQ0ZmJlMWViYTQzYWMyMTMzMDAzMjYzYzlkYWNlZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpgTBfAd13e7lkYY2jHiNiW9MsCy
JJZK4lz/9NaYU+gHx0axPQC39i2Lw2snlB8k8FsxEawQYK2+tSDQoSZMhFrw+/nh
6FnBKLeusnltjvLNG/NehiedXR14JE04vzZXtmKeI5qq52ypTM6gOdRpLMHLwbSH
pDyAPkdzvgd1pcUmdFrAhprakIvO+XeJcgN0hKiWRBDcLkAYzBQYZTMjv2vp5Dxa
WmdpZeiv82SzjLRCkrayBkOTX6LaPBQQcMv4j7hEScHoyCdkhz38GHa+ZjNgqqWm
F+qa6MPeknuJUCWA7whTbbSrS7CWntMtbWGIx2WI9NHnh5q/r4Ca1wgO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA5tVZE++HrpDrCEzADJjydrO2ZMB8GA1UdIwQY
MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct
ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1
LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTqS9tMa
S34H7LKVlBJNviQ6djvj7r3EmMbH2XdPqAkJCw3mzj11nkUAkTWm9kCK5ZNtmOoH
8lPitlGNa3FUNp5x1zjOZYs1Nz3ZpCYUIq1kMlRQPLLxYAmmxnlbcZeuN4YsCW0y
1a/eZtKp/3s0CsW5C0gCvjBr8z/7EIGyN7kgHn2U6W1tPMAA58m6O8g+0UalfMwL
qyDDnMwNIDSBy6NANbE+y+WlODOGHrz2LbaH1gM0qc2Wg45dUCjfLS/i7NpYsCsT
jfoZaVW35911l3nlQZ8dpuuYqwaVB/0nP5c22+/J64y+kmDNZZ2+zIvH8FXQ+CoM
9pCg+EJzYzHjsw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:16 2025 by rpki-client